amq-remote

amq-remote is a skill for Claude Code, Codex from avivsinai/skills-marketplace. It costs 92 tokens per session (1,832 once invoked), scanned B, original, MIT.

A remote-control tool for a running Claude Code or Codex session. It connects the session to the owner's Buzz phone app or desktop app so messages sent there become prompts in the session.

In plain words
What is it for?
Use it to connect, disconnect, or check the status of remote control for the current session.
Why use it?
It lets the owner continue directing a development session from another device instead of staying at the computer running it.

Skill for Claude CodeCodex

Written for no agent in particular: nothing here depends on one. Also seen: reads .claude/ paths; mentions Claude Code; mentions Codex.

Good fit Use it to connect, disconnect, or check the status of remote control for the current session.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/avivsinai/skills-marketplace/amq-remote
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add avivsinai/skills-marketplace --skill amq-remote
Clone the repo
git clone --depth 1 https://github.com/avivsinai/skills-marketplace

Made for: Claude Code, Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for amq-remote

README.md
[![agentmods](https://agentmods.dev/badge/skills/avivsinai/skills-marketplace/amq-remote/github.svg)](https://agentmods.dev/skills/avivsinai/skills-marketplace/amq-remote)
Your own site
<a href="https://agentmods.dev/skills/avivsinai/skills-marketplace/amq-remote"><img src="https://agentmods.dev/badge/skills/avivsinai/skills-marketplace/amq-remote/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for amq-remote

Your own site · 80×15
<a href="https://agentmods.dev/skills/avivsinai/skills-marketplace/amq-remote"><img src="https://agentmods.dev/badge/skills/avivsinai/skills-marketplace/amq-remote.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 92 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 1,832 The whole file, excluding the scripts and references it only reads on demand.
Security scan B 1 finding. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00092 $0.01832
Opus 5.5 $0.00037 $0.00733
Sonnet 5.5 $0.00018 $0.00366
Haiku 4.5 $0.00009 $0.00183

Measured today against content hash 503bd88a83af, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade B, and why

amq-remote scanned grade B with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured today.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Reads agent configuration directoriesmediumAgent snooping

.claude/, .codex/, .gemini/ hold keys, settings and other credentials a mod has no legitimate need for.

`~/.claude/settings.json` (it always exits 0, and
plugins/amq-cli/skills/amq-remote/SKILL.md · 125 lines

How it starts

The opening of the file, as written. The whole thing — 125 lines — stays where its author put it; the contents beside it link to each section on GitHub.

AMQ Remote

/amq-remote gives this session its own Buzz agent, "AMQ: ", with its own DM. The owner DMs that agent from the Buzz phone app or Buzz Desktop. Several sessions can be connected at once; each has its own agent.

In Codex the skill is invoked as $amq-remote (Codex does not register / commands for skills); the commands below are the same. Codex runs sandboxed: attach writes ~/.amq/remote, so the first attach may be refused until the user reruns it with approval — ask for that one approval, do not work around it.

  • Default (AMQ mailbox). Each DM arrives as an AMQ message from buzz in this agent's inbox. This agent answers with amq reply --id <id>, and that reply is shown in the DM. A reply with --kind status shows as progress; any other reply is the final answer. No Stop hook and no wake are needed. Noticing the message is this agent's own business (a wake, a built-in consumer, monitor, or the next drain).
  • --native. For a session that is not on AMQ: each DM is typed into this exact conversation, and the harness's own final answer goes back. On Claude Code it needs the AMQ Stop hook.

Run the steps in order. When a step says to stop, show the user the command's own message. Do not work around a refusal.

/amq-remote (connect)

  1. Tools. Run command -v amq-remote amq-acp. If either is missing, tell the user to run brew install avivsinai/tap/amq, then stop.
  2. Bind.
    • Default: run amq-remote attach --self. It uses AM_ROOT and AM_ME. If it says this session is not an AMQ participant, offer --native.
    • --native: use $AM_ROOT when set, else $HOME/.amq/remote/root (create it private with (umask 077 && mkdir -p "$HOME/.amq/remote/root")). Run amq-remote attach --self --native --root "$ROOT". If it fails, show its message and stop.
  3. --native on Claude Code only: the Stop hook. Run amq-remote doctor --root "$ROOT" --json and read its failing list; the exit code is not the signal. If an entry has boundary native_capability, tell the user this step adds one Stop hook to ~/.claude/settings.json (it always exits 0, and amq-remote claude uninstall-stop-hook removes it). Ask once, then run amq-remote claude install-stop-hook. The default mailbox path never needs this. If a native_capability entry says the PermissionRequest hook is not installed and there is no relay share (the usual --native case), tell the user: "This adds one PermissionRequest hook. It exits at once in sessions that are not connected. It lets Buzz deny a tool call only: ❌ in the DM denies, and allow stays in Claude's terminal. amq-remote claude uninstall-approval-hook removes it." Ask once, then run amq-remote claude install-approval-hook. If the entry is for a Claude target shared through a relay share, tell the user: "This adds one PermissionRequest hook. It exits at once in sessions that are not shared. It pins your Buzz public key and this share's relay, body, DM channel and target, so only your signed ✅, or your yes in the approval's thread, in this DM can allow a tool call. Do not allow Claude to edit .claude for a session, use bypassPermissions mode, or allow every Bash command: each lets the pin be changed. The relay is trusted to return the message's full edit and deletion history; replacing the amq-remote binary, or a settings edit you approve, defeats the pin. Run the install again if the share's relay or channel changes. Another decision hook you have can answer first. amq-remote claude uninstall-approval-hook removes it." Ask once, then run amq-remote claude install-approval-hook --root "$ROOT". If doctor reports claude_approval_pin_warnings, show them to the user.
  4. This session's Buzz agent. Attach printed the session name <name>. Run amq-acp setup --session <name> --out "$HOME/Downloads/AMQ <name>.agent.json" and show its printed steps as they are: in Buzz Desktop, Agents, then + then Import, pick that file, then Start, and turn on Auto-start. If AMQ Remote is new and Desktop was open, the owner first clicks Settings, then Agents, then Check again; Desktop needs no restart. Skip this step when the agent "AMQ: " already exists in Desktop.
  5. Tell the user: "Connected. DM AMQ: from the Buzz app or Desktop."
    • Default: "DMs arrive in this agent's AMQ inbox. Stop in Buzz stops waiting; a delivered message may still be acted on."
    • --native: "A DM sent while this session is busy waits. Buzz Stop cannot interrupt a Claude turn."
    • When the approval hook was installed in step 3: "When a Buzz request needs a tool approval, the DM shows it. ❌ blocks that call. ✅, or yes replied in the approval's thread, allows it when the DM offers ✅: a Bash command shown whole. Otherwise allow it in the terminal. The first answer wins." Without a relay share, say instead: "When a Buzz request needs a tool approval, the DM shows it. ❌ denies that call; allow it in Claude's terminal. The first answer wins."

Read the full file on GitHub · 125 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. today Changed 503bd88a83af
  2. 4d ago Changed ad75752fc9af
  3. 5d ago Changed 546d93bd7e89
  4. 7d ago Changed · +11 lines 0c4892c4b00d
  5. 8d ago Changed · +6 lines · +13 tokens per session 240f06caf740
  6. 9d ago Changed fc08f02ab3d3
  7. 10d ago Changed · +9 lines 97a6dee1d033
  8. 12d ago Changed · +9 lines efcd88be34c1
  9. 16d ago Changed 362b0aa77243
  10. 17d ago First seen · 90 lines · 79 tokens per session scan B f4c8b100490d

Subscribe to this mod's changes

amq-remote is a skill published in the GitHub repository avivsinai/skills-marketplace (2 stars, last pushed yesterday), licensed MIT. It adds 92 tokens to every session and 1,832 once invoked, about $0.0004 per session on Opus 5.5. A static security scan graded it B with 1 finding (reads agent configuration directories). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-24.